Default visualisation for charts

dataisbeautiful — Wed, 25 Oct 2023 07:47:46 GMT

Each time I run a search query and click visualisation, the default is "column chart".

How do I set this to default to "line chart" for myself, and how do I set this for other users?

Thanks in advance

Re: Default visualisation for charts

star_lord — Wed, 30 Oct 2024 21:30:00 GMT

@dataisbeautiful

You should be able to control this by adding this line:

display.visualizations.charting.chart = line

to the following .conf file(s):

Global:

$SPLUNK_HOME/etc/system/local/ui-prefs.conf

Per User:

$SPLUNK_HOME/etc/users/<username>/system/local/ui-prefs.conf